Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer (raw, json)
Hash identifier: aQHXhIJRPpLkCYPoGNDZAzuoOlisByIQGvrJLKFmVrc=
Subject key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521A8CC77C5A3FDEA2A5BA40568425E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.147.232.0/22
IP: 194.5.90.0/23
IP: 194.5.126.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a8:cc:77:c5:a3:fd:ea:2a:5b:a4:05:68:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:0d:a7:e0:aa:86:be:e9:6e:de:ff:24:20:
c7:7d:d7:c4:b7:1b:a3:fb:3a:f5:1d:be:52:63:4f:
85:02:65:98:01:af:b1:5c:7b:74:5a:77:88:76:7d:
3a:0f:97:13:21:c0:59:8a:a1:73:23:fe:a3:8f:80:
3f:0c:13:a5:35:c7:39:7a:1b:18:80:8a:7a:0e:5f:
57:88:af:90:67:21:44:33:ee:4f:d5:54:56:b6:e3:
c8:02:3c:99:e2:1e:a7:97:26:97:fc:db:c6:32:88:
ad:43:4a:d8:e5:56:62:b6:a1:26:cb:0b:e4:00:c6:
e1:b7:24:7f:83:ad:5c:27:68:d1:ac:4c:d6:6f:10:
9e:6d:64:6c:70:37:dd:68:33:de:4a:07:0d:8d:7e:
ae:b1:5f:95:42:4a:48:d4:d0:29:f8:9f:f0:d9:69:
e8:50:7a:01:ec:12:63:a0:14:f6:e1:c9:60:b9:55:
9b:7d:cd:0c:4e:cc:2b:a7:59:50:12:3d:8e:e4:3d:
78:62:ed:98:10:01:65:0f:a0:74:0d:6f:83:60:b8:
4e:9c:ce:8d:bc:52:9e:8e:05:80:cb:7c:f7:5e:a8:
d9:58:22:58:47:57:db:54:46:69:4b:5a:5f:fb:1e:
57:1a:41:c4:98:2c:ab:c4:f9:f9:3f:b9:74:f1:5f:
dd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.232.0/22
194.5.90.0/23
194.5.126.0/23
Signature Algorithm: sha256WithRSAEncryption
00:1c:ae:1b:40:2d:fa:c6:7b:b0:90:4c:53:2c:f9:72:8b:69:
6d:1c:64:b8:27:5d:67:c9:19:d1:4d:db:65:1d:94:ad:db:b5:
b6:f9:38:8a:52:d0:ea:c8:6e:dc:bd:38:c4:54:b0:6b:9a:76:
f6:ef:77:bb:86:5c:35:df:1d:2c:a3:f5:ed:6a:7a:6c:3e:7d:
a2:c9:1b:89:68:89:49:1d:36:59:bd:d5:fc:9c:9d:83:0b:a7:
d5:8d:40:9a:5f:12:e8:23:44:67:cb:aa:93:da:87:d9:70:f3:
3a:00:a7:61:c2:3e:2f:1f:86:8a:7b:08:ad:2e:f2:b5:e5:93:
07:47:14:97:93:68:87:5f:44:cc:b3:f3:20:43:15:e3:fc:11:
9f:b8:c5:83:65:67:b0:04:79:f3:59:70:6f:bb:78:7d:2b:2f:
d2:e5:15:97:33:3f:97:ea:e4:39:78:20:92:10:29:db:20:3b:
6b:b8:60:3d:29:da:32:98:67:97:94:aa:f6:2d:3f:d2:96:ee:
84:cb:6c:da:61:b0:8b:7f:15:b7:93:2e:b4:92:3e:6f:6f:f0:
a1:bf:e0:36:e9:5f:a8:05:ac:f7:9a:53:05:47:bc:52:6b:c4:
6b:4b:85:c9:7f:c1:9e:ee:a0:53:0c:48:83:58:39:77:69:52:
5f:5d:33:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:43 2025 by rpki-client